Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TfLG-lSozC3HHoAs-D9cd2zpdMk.cer
File: TfLG-lSozC3HHoAs-D9cd2zpdMk.cer (raw, json)
Hash identifier: UI9xN0+ZlciGADvzgAhGJw34eS1P7Bwt8HRzhMiDOaY=
Subject key identifier: 4D:F2:C6:FA:54:A8:CC:2D:C7:1E:80:2C:F8:3F:5C:77:6C:E9:74:C9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC64AF079907C220D15BCF5C48F350D4F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7c/54b0d0-e9fe-48d1-968d-9e243c2d8821/1/TfLG-lSozC3HHoAs-D9cd2zpdMk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7c/54b0d0-e9fe-48d1-968d-9e243c2d8821/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 18:30:49 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 35205
IP: 46.28.80.0/21
IP: 77.78.160.0/19
IP: 185.27.152.0/22
IP: 212.37.160.0/19
IP: 2a03:ed00::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:f0:79:90:7c:22:0d:15:bc:f5:c4:8f:35:0d:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 18:30:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4df2c6fa54a8cc2dc71e802cf83f5c776ce974c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:30:76:76:7d:19:f8:f8:2c:36:b5:4d:c6:8d:
1c:d8:9f:3b:31:2f:28:fa:2f:d1:81:1d:24:67:94:
14:3b:a1:b5:f2:8d:3b:db:2f:63:2d:7b:7e:e7:84:
12:01:c6:bf:01:4f:7c:71:f3:78:0f:de:86:1b:44:
11:9a:65:42:5e:57:7a:e7:d6:52:9a:15:de:45:08:
3a:5f:0f:b7:45:1e:78:4f:d4:9e:b3:8d:4d:85:83:
97:3f:e2:2e:e1:5c:ce:d2:ee:91:55:81:40:21:72:
25:92:1a:67:ea:7c:a6:a5:8c:ab:50:39:4b:64:df:
49:b1:42:e1:34:8f:db:8b:96:57:90:9b:ae:18:6e:
80:a4:51:1f:54:d3:f9:74:d5:6e:38:7b:c8:72:d3:
70:71:e6:dc:67:92:ba:54:4e:10:8c:6d:1c:38:35:
a1:16:04:c9:42:a9:e4:42:7f:a5:7a:bd:d7:37:18:
17:08:3d:60:9b:2f:7b:36:1e:d6:c6:a1:0d:1a:b4:
13:63:6f:38:bd:29:a3:55:32:8f:9f:74:ec:dc:64:
c0:51:77:9f:f3:47:bb:0b:b7:fb:65:b1:f3:63:8d:
f4:a6:cd:9e:d2:4b:cc:7e:23:3a:dd:69:c0:8a:3d:
30:e3:a1:f6:54:bc:c7:63:e8:7e:a0:3e:0a:57:3b:
42:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:F2:C6:FA:54:A8:CC:2D:C7:1E:80:2C:F8:3F:5C:77:6C:E9:74:C9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/54b0d0-e9fe-48d1-968d-9e243c2d8821/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/54b0d0-e9fe-48d1-968d-9e243c2d8821/1/TfLG-lSozC3HHoAs-D9cd2zpdMk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.28.80.0/21
77.78.160.0/19
185.27.152.0/22
212.37.160.0/19
IPv6:
2a03:ed00::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
35205
Signature Algorithm: sha256WithRSAEncryption
24:2a:12:15:00:6f:f5:d4:4a:18:f0:59:47:4f:46:94:8d:97:
c6:4a:0b:bb:d1:9c:d5:39:15:fb:d1:92:ee:8a:67:0b:f1:c3:
c2:c7:51:c8:c3:7f:9b:41:96:1a:3e:66:e3:b9:c4:e2:45:78:
b2:f6:df:77:b8:5e:17:e8:eb:09:1b:37:b9:61:9d:d0:c2:b6:
2a:00:05:b8:c8:43:3d:9d:36:b8:8a:a4:7c:a0:73:50:6b:fd:
0f:45:6a:85:b7:66:85:da:66:c5:cd:fd:6a:82:7b:f5:f6:db:
1e:33:81:2b:45:97:d8:6b:b7:32:70:67:e0:0c:9a:d3:37:7a:
a2:99:51:8a:83:36:ad:a9:f9:33:76:27:69:20:01:1c:31:01:
32:e6:c7:5b:a7:da:82:3d:76:fd:1c:75:83:e7:a2:7d:fd:d2:
a4:9f:43:ec:d4:a2:25:1f:91:4b:d5:c5:1e:66:f4:6f:84:11:
19:3b:32:d0:a3:cd:dc:d2:d9:a8:ea:d2:4d:c6:84:cd:87:a3:
cf:40:a7:f9:12:c1:aa:0a:2f:1c:6e:ae:16:7e:ac:b6:07:d3:
e9:e1:95:81:0f:d0:bd:f2:d3:75:53:24:11:d7:6d:44:fb:d4:
7f:e0:cf:a9:a9:b0:6b:5f:2f:60:24:a7:b3:f8:32:2a:7f:e4:
0d:89:ec:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 13:18:56 2024 by rpki-client on console-fra.rpki-client.org